high8.8
CVE-2022-24709
Cross site scripting in @awsui/components-react
Impact
### Impact Components could potentially allow cross-site scripting (XSS) in certain circumstances. These components could render content without adequate neutralization. ### Patches Fixed in 3.0.367.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @awsui/components-react | < 3.0.367 | 3.0.367 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Awsui\/Components-React | before 3.0.367 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/aws/awsui-documentation/security/advisories/GHSA-mf22-92pm-m8p8
- https://www.npmjs.com/package/%40awsui/components-react
- https://github.com/advisories/GHSA-mf22-92pm-m8p8
- https://nvd.nist.gov/vuln/detail/CVE-2022-24709
- https://www.npmjs.com/package/@awsui/components-react